[1.5.x] Fixed #19743 - Documented some limitations of contrib.auth.

Thanks Aymeric for the suggestion.

Backport of afa3e16334 from master